Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
57s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2022, 06:48
Static task
static1
Behavioral task
behavioral1
Sample
ee0ee02895585ef6e272f1b06a790100fbd74a23a909fd561c10cff498c3ca8a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee0ee02895585ef6e272f1b06a790100fbd74a23a909fd561c10cff498c3ca8a.exe
Resource
win10v2004-20220812-en
General
-
Target
ee0ee02895585ef6e272f1b06a790100fbd74a23a909fd561c10cff498c3ca8a.exe
-
Size
695KB
-
MD5
b0e736cbe813df93eea09dd8a7cd69e9
-
SHA1
3257686acee48ac2f5c79ff32d2effa2b991a35c
-
SHA256
ee0ee02895585ef6e272f1b06a790100fbd74a23a909fd561c10cff498c3ca8a
-
SHA512
18509f65aef72b81e3f6651d148ac046db06029ba84a4641a2a5b5409ea43f98b5aa73d35b35b4588706b97df70b95ec5ae8457b09715d2a0f595eab9b2c73b2
-
SSDEEP
12288:RaSO/OF57iyJFvSILpu73BsUQpUxUoX4rlKlKmH56JdwR:gStv5nPu1sUQge0lKY6nwR
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1044 868 WerFault.exe 79 5028 868 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\ee0ee02895585ef6e272f1b06a790100fbd74a23a909fd561c10cff498c3ca8a.exe"C:\Users\Admin\AppData\Local\Temp\ee0ee02895585ef6e272f1b06a790100fbd74a23a909fd561c10cff498c3ca8a.exe"1⤵PID:868
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 868 -s 2602⤵
- Program crash
PID:1044
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 868 -s 2202⤵
- Program crash
PID:5028
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 868 -ip 8681⤵PID:3376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 868 -ip 8681⤵PID:4964